• Authors create journal accounts with their own email addresses and verify those accounts themselves.
• Temporary credentials are entered through a single-use encrypted form, not through ordinary email or messaging services.
• Credentials are restricted to the authorized submission and deleted after portal login, expiry or completion.
• CAPTCHA, two-factor authentication, electronic signatures and personal legal declarations remain with the author where required.
• Manuscript and workflow files are accessible only to authorized accounts and administrators.

Core rule: If a fact cannot be verified, it is not presented as verified. If information is missing, it is not invented.